Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: /EY+EWqIQjamYINy7VmedwtUSrX8JKoZoIlNOPTtr04=
Subject key identifier: 90:17:A8:B4:FA:9A:9B:9C:40:82:BB:80:E3:1E:E4:47:80:12:C3:A2
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019CABD96E4578D4F7E7736D901AB12936C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1453
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: gkjA4x0JfqK5DL2ja29kbDoxWZFC+8psQi+jAwx+BBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6e:45:78:d4:f7:e7:73:6d:90:1a:b1:29:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=9017a8b4fa9a9b9c4082bb80e31ee4478012c3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:65:e6:50:99:5a:79:3d:73:4e:fe:64:20:
b2:d9:3f:28:98:37:05:61:57:1b:84:c2:7e:f3:2c:
42:81:1c:3a:c2:3c:8d:35:14:cc:18:a9:da:58:1f:
ac:e1:f6:8f:da:86:2e:14:6f:e1:d8:45:28:01:4d:
86:8b:c9:fb:50:88:8e:67:44:67:73:bd:e7:72:74:
c7:65:30:4e:d6:8b:7f:63:bc:a4:a8:4d:ec:ae:ed:
99:97:0f:af:11:5f:9e:95:83:51:68:22:c8:4f:b8:
48:cb:41:80:64:fc:3d:31:02:dd:85:fd:6e:0d:67:
8c:fe:c9:6f:2b:2a:cd:80:27:a7:38:40:17:e0:07:
83:17:36:db:10:4d:b5:3c:cf:76:07:71:4e:bf:6b:
99:e3:25:68:9a:4c:17:ff:cd:ec:0e:c4:43:ef:f3:
00:d6:a0:b0:78:65:d0:5c:dc:5f:43:76:69:85:41:
7b:ee:0c:18:73:1a:67:91:6e:49:69:6b:2e:3e:b6:
ba:17:95:03:45:cf:df:02:03:90:fa:27:ee:14:23:
68:bd:48:13:8b:7d:e0:34:e8:da:43:77:c1:ee:fb:
bd:e3:1c:1a:44:40:64:b1:bc:e6:10:9e:98:86:94:
3e:34:15:8c:14:df:db:39:fd:f4:b3:67:79:95:8b:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:A8:B4:FA:9A:9B:9C:40:82:BB:80:E3:1E:E4:47:80:12:C3:A2
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:a2:2c:e8:96:5a:a1:bb:bc:a3:38:4a:98:f1:f3:41:78:
b8:ea:4f:a9:95:9e:5f:17:22:d7:8c:7b:3d:df:f1:01:97:7d:
0b:cc:d1:e6:26:42:a2:b7:9a:a8:78:f5:ef:ee:fd:81:19:38:
56:91:89:02:fb:7e:0d:a8:58:05:98:a8:73:a4:55:55:88:62:
9b:76:11:ec:69:4a:b7:47:a2:02:aa:af:c0:10:a5:eb:67:3b:
a5:c5:fc:a7:f2:09:bf:8c:31:7f:dd:43:9e:4c:b2:82:f2:ff:
bc:8d:95:e3:90:de:7d:d5:67:09:57:89:91:3f:10:02:c5:8d:
8b:b4:7b:13:e0:62:8c:17:6d:43:cc:da:d2:c2:c5:92:dd:c8:
e0:8c:95:13:65:2d:84:d6:59:8f:ed:9e:9a:72:34:3b:fe:c6:
73:3f:f0:59:8f:85:c8:0c:d1:5a:ba:64:c9:43:a7:c3:58:55:
01:d9:bc:12:a0:c7:c3:32:ef:5c:73:97:f7:9d:32:38:a2:6a:
57:63:fb:4d:14:80:23:ee:e2:65:93:ba:1d:f3:44:a6:eb:73:
2a:12:ae:aa:c9:22:8b:80:cb:e4:09:b0:e4:1f:51:41:af:30:
a8:2c:e1:a6:ac:ec:ad:31:e1:cb:ff:fd:ad:aa:83:fa:05:fe:
14:27:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:15 2026 by rpki-client